SHA2 (SHA256) issue fix

[ghost]

If its impossible to connect from device over HTTPS (https://), this maybe related to SHA2 (SHA256) issue on Symbian 9.x (S60v3 – S^3), so you need install next update (only work for Symbian S60v5 and above)

• http://dl.nokia.com/ns/symfix/networking_improvements.SIS

Details

• https://answers.microsoft.com/en-us/mobiledevices/forum/mdnokian/sha2-support-on-nikia-c5e71-and-e72/4521fcec-b8e4-4c4a-a5a9-08d1f26118e0?auth=1
• https://answers.microsoft.com/ru-ru/mobiledevices/forum/mdasha/sha2/5ccc1717-4d1c-463e-8051-eec49c596143

P.S.: make a backup of networking_improvements.sis on your website

[mrRosset]

Nice thanks

[JuniorJPDJ]

The fix actually doesn't work on S60v5, it works only for S60v3 FP2.
There is unofiicial patch for S60v3 FP1 and I still have not found patch for S60v5 :<

S60v3 FP1: https://4pda.ru/forum/index.php?showtopic=86114&view=findpost&p=79071151

[erhoof]

The fix actually doesn't work on S60v5, it works only for S60v3 FP2.

There is unofiicial patch for S60v3 FP1 and I still have not found patch for S60v5 :<

S60v3 FP1: https://4pda.ru/forum/index.php?showtopic=86114&view=findpost&p=79071151

I made OFW-CFW mod for S60v5. It is 100% working, tested on N97, also Nokia E5-00.

https://github.com/NuruTasDemir/symbian-mods-new/blob/master/SHA2Support%2BCertificates_S60v3-S60v5.zip

Can you create any sort of instruction? Please

[NuruDashdamir]

Can you create any sort of instruction? Please

Unfortunately, the mod I shared had some problems because of expired certs now. Also we don't even have TLS 1.2, just TLS 1.0 with SHA256 support. This means most of websites still won't work.

Best option is making a tutorial for creating proxy server (or Nokia compatible VPN server). Then people could host their own proxy servers to connect internet over them.

[NuruDashdamir]

CACerts-2021-update.zip

As we know, Symbian doesn't support TLS 1.2. However, even if you just want to browse TLS 1.0 sites, you need new root certificates. This certificate repository is for Symbian devices which has "networking_improvements.sis" installed (or built-in, like Belle). This zip only includes "CACerts.dat" with many new certificates added (this file is the main CA repository of Symbian).

https://www.cdn77.com/tls-test - This is a site you can use to check if the domain you want to visit has TLS 1.0 support.
Basically to browse a HTTPS site on Symbian device:

1. The site you want to visit must have TLS 1.0 support
2. You must have required root certificates on your device to visit the site

Tested on Nokia E5-00 (with "networking_improvements.sis" built into firmware) and Nokia E7-00 (with default firmware to make sure it works). Device must be hacked to copy file over.

Edit: if that "CACerts.dat" file didn't work for any reason, you can try installing certificates in this ZIP file manually (using built-in file manager). Still, I recommend something like a "oldssl-proxy" for better experience (as mentioned comment below).
symbian-ca-root-certs-2022.zip

[DrEureka]

Any update for N95 60 v3?

[NuruDashdamir]

Any update for N95 60 v3?

Unfortunately, we came to a point that even TLS 1.0 / 1.1 support is deprecated for most sites. And there is no native way to support TLS 1.2, so we need proxies (or VPNs, if anyone ever manages to setup one easily).

If you are familiar with Docker a bit, there is a good project works as proxy server, which will allow to browse anything over HTTPS, I have tested it and it's working perfectly in my local network (you'll need to install a generated certificate and configure proxy settings on Symbian device):
https://bitbucket.org/ValdikSS/oldssl-proxy

Keep in mind that nowadays nearly all websites depend heavily on modern JavaScript, so Symbian devices are pretty limited in terms of browsing the web.

"reddit.com" loads on Symbian over "oldssl-proxy" (Nokia E5-00):

[DrEureka]

Any update for N95 60 v3?

Unfortunately, we came to a point that even TLS 1.0 / 1.1 support is deprecated for most sites. And there is no native way to support TLS 1.2, so we need proxies (or VPNs, if anyone ever manages to setup one easily).

If you are familiar with Docker a bit, there is a good project works as proxy server, which will allow to browse anything over HTTPS, I have tested it and it's working perfectly in my local network (you'll need to install a generated certificate and configure proxy settings on Symbian device): https://bitbucket.org/ValdikSS/oldssl-proxy

Keep in mind that nowadays nearly all websites depend heavily on modern JavaScript, so Symbian devices are pretty limited in terms of browsing the web.

"reddit.com" loads on Symbian over "oldssl-proxy" (Nokia E5-00):

Hello, thank you very much for taking the time to respond. I have knowledge in Docker and I will check that server and try it out via VPN. Again, thank you very much.

[stuaxo]

Has anyone actually managed to build symbian and get it working on any of the old devices ?

[artem78]

Hello!

Does anybody know, how to install new root certificate to the phone if certificate manager not available from menu Settings -> General -> Security. I have rom patcher with full access - maybe it possible to place certificate file in some place?

I try to connect my N95 8GB phone to own server with TLS1.0 running using Let's Encrypt certificate, but have certificate verification problem.

[artem78]

Another question: is it possible to use SHA-384 algorithm?